Live › vulnerability › CVE-2026-70381
Go to dashboardA web server configuration flaw lets unauthenticated attackers on the network fetch resources meant only for on-device use. The exposed files reportedly include screen-saver content and web interface assets, not credentials or admin functions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 20:50 UTC. All times on this page are UTC.
The sources do not name the affected product or firmware. Teams running network devices with an embedded web interface should check whether that interface is reachable from untrusted networks. Teams without such devices can skip it.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An access-control vulnerability has been identified in the web server configuration. Some resources intended for on-device use only could be accessed remotely by an unauthenticated attacker with network access to the web interface. The accessible resources do not expose credentials or provide administrative functionality, but may include non-public device content, such as screen-saver content or assets used by the web interface.
This page as .md · .json · in your agent: get_signal("CVE-2026-70381")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.